I need some clarification regarding what needs to be setup after installing snapraid and setting up the disks. In the TechoDAD videos he says to add schedule job for running snapraid sync. However, in the SnapRAID services page there is a diff scripts setting section and diff script schedule button. I clicked the diff scripts schedule button. I noticed afterwards that it added a scheduled job for /usr/sbin/omv-snapraid-diff that runs daily.

Do I need both jobs running? Is the diff script job added by the diffscript schedule button enough to perform syncs, check for bit rot, and fix errors?

Are there any other jobs I should schedule for snapraid?

Thank you for you help.

Thanks the symlinks plugging works just fine.

if i make changes to fstab, won't the web gui overwrite it I update my configuration?

I have created a unionfs pool called fred-pool. However the mount point at the CLI is /srv/{some long string of numbers} How I don't see anywhere in the web gui to set this to a nicer mount point name like /srv/fred-pool.

How can I do this.

Thanks.

Thanks subzero79 for mentioning the drop bear method. I think it works perfectly.

For any one else that would like to unlock LUKS partitions remotely by ssh using dropbear at boot up here is what I did.

* My setup is as such: OMV 5, LUKS+UnionFS+SnapRaid which I setup using https://michaelxander.com/diy-nas/. Becarefull not to reboot here if you are using unionfs becuase the system will panic and drop you to rescue mode because the LUKS drives have not been encrypted. (post 247546)

* I updated my /etc/crypttab to look like this

# <target name> <source device>         <key file>      <options>
sdb-crypt /dev/sdb none luks,initramfs
sdc-crypt /dev/sdc none luks,initramfs
sdd-crypt /dev/sdd none luks,initramfs

Just by doing this at the next reboot the system will ask you for the pass phrase for each disk. This is nice in itself.

Also note you can change luks,initramfs to luks,initramfs,keyscript=decrypt_keyctl if you want the same password to cached for 60 seconds and used on all the drives. There are other scritpts that my be hand in /lib/cryptsetup/scripts

Setting up Dropbear

* I guided by the the instructions on on how to setup Dropbear at https://www.arminpech.de/2019/12/23/debian-unlock-luks-root-partition-remotely-by-ssh-using-dropbear/ I did this:

** apt-get install dropbear-initramfs

** I copied my public key from by putty client to /etc/dropbear-initramfs/authorized_keys  You have to do this because Dropbear has disabled password based logins.

** Changed the DROPBEAR_OPTIONS line in /etc/dropbear-initramfs/config

DROPBEAR_OPTIONS="-p 2222"

** Ran update-initramfs -k all -u

Results

When your system reboots it will wait for you to enter the passphrase for each disk. But now you can SSH into the system too.

I used putty with my private key that is paired with the public key that I added in the step above to port 2222.

You login as root and are automatically taken to the command prompt.

Enter bin/cryptroot-unlock and respond the passphrases for each disk.

Afterwards you will be logged out and the boot process will proceed as normal.

#OMV5.x

I followed your instructions on the git page.

When I went to add a device that was unlocked I go the following error in a GUI popup window:

failed to execute XPath query '//system/storage/luks'


Error #0:
OMV\Config\DatabaseException: Failed to execute XPath query '//system/storage/luks'. in /usr/share/php/openmediavault/config/database.inc:262
Stack trace:
#0 /usr/share/openmediavault/engined/rpc/luks.inc(591): OMV\Config\Database->set(Object(OMV\Config\ConfigObject))
#1 [internal function]: OMVRpcServiceLuksMgmt->setCrypttab(Array, Array)
#2 /usr/share/php/openmediavault/rpc/serviceabstract.inc(123): call_user_func_array(Array, Array)
#3 /usr/share/php/openmediavault/rpc/rpc.inc(86): OMV\Rpc\ServiceAbstract->callMethod('setCrypttab', Array, Array)
#4 /usr/sbin/omv-engined(537): OMV\Rpc\Rpc::call('LuksMgmt', 'setCrypttab', Array, Array, 1)
#5 {main}

Any ideas?

BTW if this works, do you think the early ssh method mentioned in the original like would work?

Hi subzero79,

Have you been able to implement the instructions from

https://blog.iwakd.de/headless-luks-decryption-via-ssh

in omv 5?

In the decrypt.target file, I am having problems with the line:

Requires=systemd-cryptsetup@crypto.service srv.mount start-full-system.service

The system does not seem to create a systemd-cryptsetup@crypto.service and I can figure what to replace srv.mount with.

Also when I runt the command

# systemctl status systemd-cryptsetup@crypto.service

I get:

Unit systemd-cryptsetup@crypto.service could not be found.

It's like omv5 does not read the crypttab.

I am stuck. Any direction would be appreciated.

Gnarf How are you exactly manually mounting the unionfs from the dashboard menu after you have manually decrypted the disks?

I am having the same issue. Not sure what to do.